We're in the middle of a rollout of CoreOS. We'll finish the deployment, but won't be going in on any of the differentiators like locksmith. If only to make our possible migration to either (1) Debian or (2) The inevitable fork of Container Linux easier.